Route Origin Authorization

$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144795.roa
File:                     AS144795.roa (raw, json)
Hash identifier:          EKtXEUVgOBdLZ0tXmLhALjZU4NkvQ+8cyuUHzMhwqws=
Subject key identifier:   59:50:28:04:6A:71:BF:19:D8:F1:B9:25:0D:71:01:68:E1:4D:BA:50
Certificate issuer:       /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial:       0DA196E41358C3E4FD0750B15A269E44A6FBE34B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access:    rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access:      rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144795.roa
Signing time:             Fri 22 May 2026 06:27:48 +0000
ROA not before:           Fri 22 May 2026 06:22:48 +0000
ROA not after:            Fri 21 May 2027 06:27:48 +0000
asID:                     144795
IP address blocks:        240a:a861::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a1:96:e4:13:58:c3:e4:fd:07:50:b1:5a:26:9e:44:a6:fb:e3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
        Validity
            Not Before: May 22 06:22:48 2026 GMT
            Not After : May 21 06:27:48 2027 GMT
        Subject: CN=595028046A71BF19D8F1B9250D710168E14DBA50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:f7:b7:c1:29:5c:7a:4e:d9:74:48:bf:5e:
                    3c:20:c0:1d:91:3f:69:6b:00:9d:f0:d2:24:c1:e9:
                    a2:98:1b:9f:d0:ac:95:09:5b:6d:35:b3:09:02:6c:
                    e8:89:69:a8:a2:d1:dd:40:40:05:bf:d2:c1:90:3d:
                    49:19:5f:62:b0:16:c5:b8:f8:57:21:dc:53:1c:c3:
                    fe:7d:d7:98:ab:c1:bd:4c:6a:bd:10:2b:db:f7:1d:
                    58:5b:c4:fc:6b:1d:37:34:b6:91:02:a1:6d:99:76:
                    c7:36:2c:1f:7c:04:90:7e:7f:ee:39:12:fa:ae:99:
                    d7:14:0c:bc:a7:de:b0:5d:b4:19:56:64:f8:92:fe:
                    ff:89:65:70:17:6b:88:f5:92:2b:3e:bd:9c:51:a4:
                    11:3f:8f:1e:2d:eb:8f:71:07:65:84:11:bc:4c:50:
                    05:7d:db:6b:fd:1e:2a:85:f3:43:58:db:ac:05:1b:
                    10:e6:0d:6b:f4:69:ca:e9:76:53:d2:b2:d9:90:cb:
                    d5:21:23:26:bd:f8:0d:39:74:c9:98:43:6b:37:55:
                    45:15:e1:bd:d2:45:77:a9:b1:f1:28:51:e1:1f:c2:
                    47:6c:73:42:c1:18:d3:c1:4d:3d:cc:a2:45:7d:cb:
                    f4:05:8e:3e:a8:65:5b:1e:94:9c:87:ec:8b:0f:32:
                    6b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:50:28:04:6A:71:BF:19:D8:F1:B9:25:0D:71:01:68:E1:4D:BA:50
            X509v3 Authority Key Identifier:
                keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144795.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:a861::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:ed:cf:0d:ad:d2:65:b2:d8:95:81:b5:bd:0d:7d:f4:57:57:
         2f:aa:50:7a:e9:df:95:cf:a3:12:72:34:60:e3:31:31:98:56:
         48:e8:a2:fd:8e:ae:a6:6a:6f:e7:b7:b7:9b:da:dc:f8:4f:f6:
         cd:36:50:92:e6:94:f2:04:14:e8:77:6d:f5:94:92:18:fe:47:
         ff:c0:63:09:85:1a:33:3d:c5:15:8b:8c:6c:31:00:47:90:17:
         34:a2:24:9b:d9:c3:1d:f9:e6:1b:7b:6c:7f:a4:ab:aa:ec:04:
         02:b3:d5:0d:67:a3:eb:cd:b0:10:18:d1:c8:01:71:9e:cf:57:
         4d:3f:6f:4c:d7:b3:5a:4f:f8:59:ef:9a:2e:ff:e9:67:d7:3c:
         0e:03:90:03:35:de:72:e9:66:f5:b7:4f:f7:fc:ab:0e:17:f7:
         4e:d2:36:e6:ee:1c:a1:b4:24:2c:2f:57:7b:29:dc:fd:31:b4:
         1c:0d:39:0f:cd:55:8c:2c:32:cc:72:25:f7:c7:e7:a0:09:f2:
         a4:76:54:7a:7b:11:d7:78:33:f8:9b:79:20:d2:50:cf:1a:4d:
         47:1a:8f:b3:5d:d9:6a:2b:00:2a:aa:78:16:44:a5:bf:b3:bb:
         c3:f6:bb:18:a2:ff:19:61:65:66:90:aa:0d:4c:97:c1:03:94:
         fa:43:db:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:37 2026 by rpki-client